KHNP contractor hack leaks about 720,000 files including nuclear plant data
A KHNP contractor was hacked twice, in September 2020 and June 2024, and about 720,000 files including nuclear power plant data were stolen. The attackers exploited a vulnerability in a centralised document management system to obtain administrator passwords and were believed to be linked to North Korea. About 110,000 of the leaked files were found to be KHNP technology-related materials.
Key facts
- Affected organisation
- Being confirmed
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- About 720,000 files including nuclear power plant data, of which about 110,000 were KHNP technology-related materials
- Cause / method
- Hacking that exploited a vulnerability in a centralised document management system to obtain administrator passwords
- Location
- South Korea
If your data was exposed
Exposed dataPassword
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- It was reported that about 720,000 items, including nuclear power plant data, had been leaked from a KHNP contractor.
- It was found that a vulnerability in the centralised document management system had been exploited in the two hacks and that about 110,000 KHNP technology-related files had been leaked.
Also affected by this incident
720,000 items including nuclear plant technology leaked from Korea Hydro & Nuclear Power
↳ Knock-on damage from another organisation’s incident · View original incident720kImpact: 720,000 items including nuclear power plant technology
720,000 items, including nuclear power plant technology, were leaked from Korea Hydro & Nuclear Power. Hacking by attackers believed to be North Korean was identified as the cause.
Read on 국민일보 ↗
6 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.